eSyndiCat Pro v2.4.1 - Multiple Web Vulnerabilities

Document Title: =============== eSyndiCat Pro v2.4.1 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=575 Release Date: ============= 2012-05-18 Vulnerability Laboratory ID VL-ID: ==================================== 575...

eSyndiCat Pro 2.3.5 - Multiple Cross-Site Scripting Vulnerabilities

eSyndiCat Pro 2.3.5 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/50822/info eSyndiCat Pro is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to...

eSyndiCat Pro 2.3.05 Cross Site Scripting

Exploit Title: eSyndiCat Pro v2.3.05 Cross-Site Scripting XSS Script Page : http://www.esyndicat.com Date: 24:11:2011 Author : RandomStorm - http://www.randomstorm.com Avram Marius Gabriel d3v1l Tested on: Windows XP & Vista IE9 - Firefox 8.0 Note: Redirect and Html Injection can be performed als...

eSyndiCat Pro 2.3.5 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/50822/info eSyndiCat Pro is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in...

eSyndiCat Directory Software Cross Site Scripting

eSyndiCat Directory Software preview= version 2.2 and 2.3 - Cross-Site Scripting XSS & Redirect http://www.esyndicat.com 30 - 01 - 2011 Avram Marius d3v1l http://twitter.com/securityshell - http://security-sh3ll.blogspot.com ------------------------------------------------------------------------...

eSyndiCat Directory Software 2.22.3 - preview Cross-Site Scripting

eSyndiCat Directory Software 2.22.3 - preview Cross-Site Scripting source: https://www.securityfocus.com/bid/46082/info eSyndiCat Directory Software is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to...

eSyndiCat Directory Software 2.2/2.3 - 'preview' Cross-Site Scripting

source: https://www.securityfocus.com/bid/46082/info eSyndiCat Directory Software is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user...

CVE-2010-4504

Multiple cross-site scripting XSS vulnerabilities in eSyndiCat Directory 2.3 allow remote attackers to inject arbitrary web script or HTML via the title parameter to 1 suggest-category.php and 2 suggest-listing.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in eSyndiCat Directory 2.3 allow remote attackers to inject arbitrary web script or HTML via the title parameter to 1 suggest-category.php and 2 suggest-listing.php...

CVE-2010-4504

CVE-2010-4504 affects eSyndiCat Directory 2.3. The vulnerability is a Cross-Site Scripting (XSS) flaw exploitable via the title parameter in two scripts, suggest-category.php and suggest-listing.php. Remote attackers could inject arbitrary web script or HTML as described in the CVE. The connected...

CVE-2010-4504

Multiple cross-site scripting XSS vulnerabilities in eSyndiCat Directory 2.3 allow remote attackers to inject arbitrary web script or HTML via the title parameter to 1 suggest-category.php and 2 suggest-listing.php...

CVE-2010-4504: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in eSyndiCat Directory 2.3 allow remote attackers to inject arbitrary web script or HTML via the title parameter to 1 suggest-category.php and 2 suggest-listing.php...

eSyndiCat Directory Software 2.3 Cross Site Scripting

------------------------------------------------------------------------- eSyndiCat Directory Software 2.3 - Cross-Site Scripting XSS http://www.esyndicat.com/ 25 - 11 - 2010 Avram Marius d3v1l http://twitter.com/securityshell - http://security-sh3ll.blogspot.com...

eSyndiCat 2.3.03 Backup Disclosure

======================================================================================== | Title : eSyndiCat v2.3.03 Download Backup Vulnerability | Author : indoushka | email : [email protected] | Dork : Powered by eSyndiCat Pro v2.3.03 | Tested on: windows SP2 Français V.Pnx2 2.0 | Bug :...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in register.php in eSyndiCat Directory 2.2 allow remote attackers to inject arbitrary web script or HTML via the 1 username, 2 email, 3 password, 4 password2, 5 securitycode, and 6 register parameters...

CVE-2008-6924

Multiple cross-site scripting XSS vulnerabilities in register.php in eSyndiCat Directory 2.2 allow remote attackers to inject arbitrary web script or HTML via the 1 username, 2 email, 3 password, 4 password2, 5 securitycode, and 6 register parameters...

CVE-2008-6924

CVE-2008-6924 affects eSyndiCat Directory 2.2, with XSS in register.php allowing remote injection of scripts via six parameters (username, email, password, password2, security_code, register). The initial data lists a MEDIUM base score (CVSS v2: 4.3) and mentions no exploitation details; no remed...

CVE-2008-6924: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in register.php in eSyndiCat Directory 2.2 allow remote attackers to inject arbitrary web script or HTML via the 1 username, 2 email, 3 password, 4 password2, 5 securitycode, and 6 register parameters...

CVE-2008-3299

eSyndiCat 1.6 allows remote attackers to bypass authentication and gain administrative access by setting the adminlng cookie value to 1. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Authentication flaw

eSyndiCat 1.6 allows remote attackers to bypass authentication and gain administrative access by setting the adminlng cookie value to 1. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...